Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/ULmR7nt4X0KArfPeDQKLAVI6lGY.roa
File: ULmR7nt4X0KArfPeDQKLAVI6lGY.roa (raw, json)
Hash identifier: oGaV/mS/HhIUPy/rXNENqD0WEjjWMz2Zt3n+5UyEsuU=
Subject key identifier: 50:B9:91:EE:7B:78:5F:42:80:AD:F3:DE:0D:02:8B:01:52:3A:94:66
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 03DC
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/ULmR7nt4X0KArfPeDQKLAVI6lGY.roa
Signing time: Fri 06 Aug 2021 11:46:29 +0000
ROA not before: Fri 06 Aug 2021 11:46:29 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 141373
IP address blocks: 59.83.132.0/22 maxlen: 24
59.83.176.0/22 maxlen: 24
218.98.65.0/24 maxlen: 24
218.98.66.0/24 maxlen: 24
218.98.67.0/24 maxlen: 24
218.98.68.0/24 maxlen: 24
218.98.73.0/24 maxlen: 24
218.98.74.0/24 maxlen: 24
218.98.75.0/24 maxlen: 24
218.98.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Aug 6 11:46:29 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=50B991EE7B785F4280ADF3DE0D028B01523A9466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:e7:f9:d9:3b:7e:26:92:00:ef:8b:58:bb:
4e:07:ac:ad:5e:4c:e2:fc:7f:88:cc:8f:3c:ca:c2:
fd:3d:ff:31:99:04:4a:b0:5f:c3:9f:0a:84:aa:41:
81:f9:cd:dd:1a:e5:a7:39:7e:57:0b:f5:e1:41:95:
b5:4d:1e:43:91:ef:ce:04:76:da:cb:2f:96:98:c5:
2b:b4:9f:b0:ab:ce:c8:ad:2b:1f:8b:65:ca:87:a1:
e2:88:ad:45:ee:64:96:bf:52:1b:e3:d2:88:da:6d:
fe:b0:94:1e:d0:d5:46:1b:e2:0f:d4:ce:33:5d:3e:
33:49:3b:c8:81:06:de:73:6f:27:f6:2d:b8:f9:4f:
3a:3a:70:fe:7c:e5:88:73:fa:68:35:80:bb:5d:19:
5a:4e:46:73:d2:5b:53:81:7b:76:7a:d2:ae:9a:76:
c5:21:98:36:49:bb:4f:a1:ab:39:7f:c5:e2:08:93:
2e:6c:d6:4f:9f:e1:90:a5:d9:c8:7f:18:c1:85:e0:
95:c8:2c:4f:78:e5:72:f5:56:f7:64:d7:86:7c:84:
81:a8:ba:7f:65:f0:75:4f:e8:6a:40:dc:e8:21:fa:
28:fd:3b:07:e8:5e:16:ca:3b:19:96:ea:f9:3b:58:
9f:26:90:f7:39:30:9e:7d:0a:18:bf:f5:c7:38:a4:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B9:91:EE:7B:78:5F:42:80:AD:F3:DE:0D:02:8B:01:52:3A:94:66
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/ULmR7nt4X0KArfPeDQKLAVI6lGY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
59.83.176.0/22
218.98.65.0-218.98.68.255
218.98.73.0-218.98.76.255
Signature Algorithm: sha256WithRSAEncryption
21:d3:20:d5:a7:0a:cc:1b:55:8e:2c:d0:6c:be:22:8c:41:66:
51:8d:72:a4:c2:10:1f:ad:0f:ff:ad:c2:55:bf:a8:f6:79:b8:
32:35:0e:59:e0:f3:4b:10:2a:97:5c:2b:ee:26:f7:c8:5e:a0:
e1:72:b8:1c:26:a5:59:d1:4f:5c:0c:43:c7:75:ca:84:2a:33:
c3:80:ce:e8:e5:a8:46:3d:1b:d2:ef:d1:18:15:dd:fb:05:6c:
75:f1:c1:4c:1f:6f:81:ce:00:06:5b:db:48:ba:78:d6:4e:76:
0f:2b:c4:81:1c:d5:90:d1:fd:72:3e:93:63:19:f4:85:f1:1b:
5a:3b:48:2e:f2:00:80:41:aa:1e:70:f4:ab:b2:8b:00:27:58:
f1:73:3b:e7:3f:5f:45:38:bb:0f:00:ff:90:44:c6:e8:85:b3:
da:c4:f2:64:12:fd:aa:0c:78:99:1f:d2:00:78:71:43:f6:eb:
c5:74:45:53:ec:68:e9:fc:f1:39:10:86:77:12:cf:2e:9a:17:
fc:8a:e0:a8:3e:f5:41:d5:67:bc:47:b4:a6:a7:73:cb:f8:22:
60:f3:a3:e5:e4:37:40:9e:fe:d6:ad:e8:be:25:18:19:c6:06:
c0:82:24:85:ef:d2:11:f2:1b:67:2d:68:0e:69:52:40:72:d0:
ff:93:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org